Aws/securitylake

@swamp/aws/securitylakev2026.11.02.1· AGPL-3.0-or-later· 1d agoBEHAVIORS

01README

AWS SECURITYLAKE infrastructure models

02Behaviors4

@swamp/aws/securitylake/aws-log-sourcev2026.10.23.1aws_log_source.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
Accounts?	array	no	AWS account where you want to collect logs from.
DataLakeArn	string	yes	The ARN for the data lake.
SourceName	string	yes	The name for a AWS source. This must be a Regionally unique value.
SourceVersion	string	yes	The version for a AWS source. This must be a Regionally unique value.

fn create()

Create a SecurityLake AwsLogSource

fn get(identifier: string)

Get a SecurityLake AwsLogSource

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the SecurityLake AwsLogSource

fn update()

Update a SecurityLake AwsLogSource

fn delete(identifier: string)

Delete a SecurityLake AwsLogSource

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the SecurityLake AwsLogSource

fn sync()

Sync SecurityLake AwsLogSource state from AWS

fn list(maxPages?: number, resourceModel?: string)

List SecurityLake AwsLogSource resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— SecurityLake AwsLogSource resource state

@swamp/aws/securitylake/data-lakev2026.10.23.1data_lake.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
EncryptionConfiguration?	object	no	Provides encryption details of Amazon Security Lake object.
LifecycleConfiguration?	object	no	Provides lifecycle details of Amazon Security Lake object.
ReplicationConfiguration?	object	no	Provides replication details of Amazon Security Lake object.
MetaStoreManagerRoleArn?	string	no	The Amazon Resource Name (ARN) used to index AWS Glue table partitions that are generated by the ingestion and normalization of AWS log sources and custom sources.
Tags?	array	no

fn create()

Create a SecurityLake DataLake

fn get(identifier: string)

Get a SecurityLake DataLake

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the SecurityLake DataLake

fn update()

Update a SecurityLake DataLake

fn delete(identifier: string)

Delete a SecurityLake DataLake

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the SecurityLake DataLake

fn sync()

Sync SecurityLake DataLake state from AWS

fn list(maxPages?: number, resourceModel?: string)

List SecurityLake DataLake resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— SecurityLake DataLake resource state

@swamp/aws/securitylake/subscriberv2026.10.23.1subscriber.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
AccessTypes	array	yes	The Amazon S3 or AWS Lake Formation access type.
DataLakeArn	string	yes	The ARN for the data lake.
SubscriberIdentity	object	yes	The AWS identity used to access your data.
SubscriberName	string	yes	The name of your Security Lake subscriber account.
SubscriberDescription?	string	no	The description for your subscriber account in Security Lake.
Tags?	array	no	An array of objects, one for each tag to associate with the subscriber. For each tag, you must specify both a tag key and a tag value. A tag value cannot be null, but it can be an empty string.
Sources	array	yes	The supported AWS services from which logs and events are collected.

fn create()

Create a SecurityLake Subscriber

fn get(identifier: string)

Get a SecurityLake Subscriber

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the SecurityLake Subscriber

fn update()

Update a SecurityLake Subscriber

fn delete(identifier: string)

Delete a SecurityLake Subscriber

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the SecurityLake Subscriber

fn sync()

Sync SecurityLake Subscriber state from AWS

fn list(maxPages?: number, resourceModel?: string)

List SecurityLake Subscriber resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— SecurityLake Subscriber resource state

@swamp/aws/securitylake/subscriber-notificationv2026.10.23.1subscriber_notification.ts

Global Arguments

Argument	Type	Required	Description
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
NotificationConfiguration	object	yes
SubscriberArn	string	yes	The ARN for the subscriber

fn create()

Create a SecurityLake SubscriberNotification

fn get(identifier: string)

Get a SecurityLake SubscriberNotification

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the SecurityLake SubscriberNotification

fn update()

Update a SecurityLake SubscriberNotification

fn delete(identifier: string)

Delete a SecurityLake SubscriberNotification

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the SecurityLake SubscriberNotification

fn sync()

Sync SecurityLake SubscriberNotification state from AWS

fn list(maxPages?: number, resourceModel?: string)

List SecurityLake SubscriberNotification resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— SecurityLake SubscriberNotification resource state

03Previous Versions19

2026.10.25.1AGPL-3.0-or-laterOct 25, 2026

2026.10.24.1AGPL-3.0-or-laterOct 24, 2026

2026.10.23.1AGPL-3.0-or-later(was none)Oct 24, 2026

Updated: aws_log_source, data_lake, subscriber, subscriber_notification

2026.10.13.1Oct 13, 2026

Updated: aws_log_source, data_lake, subscriber, subscriber_notification

2026.10.08.1Oct 8, 2026

2026.10.06.1Oct 6, 2026

2026.10.04.1Oct 4, 2026

2026.10.03.1Oct 3, 2026

2026.10.02.1Oct 2, 2026

2026.10.01.1Oct 1, 2026

2026.09.30.1Sep 30, 2026

2026.09.29.1Sep 29, 2026

2026.09.28.1Sep 28, 2026

2026.09.27.1Sep 27, 2026

2026.09.26.1Sep 26, 2026

2026.09.25.1Sep 25, 2026

2026.09.24.1Sep 24, 2026

2026.09.23.1Sep 23, 2026

2026.09.21.1Sep 21, 2026

04Stats

100 / 100

Downloads

195

Archive size

819.8 KB

Verified by Swamp

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types (deprecated)1/1earned
Dependencies pass trust audit2/2earned
Docs keep secrets in a vault1/1earned
Has description1/1earned
Platform support declared (or universal)2/2earned
License2/2earned
Verified public repository2/2earned

Repository

https://github.com/swamp-club/swamp-extensions

05Platforms

linux · x86_64 linux · aarch64 macOS · x86_64 macOS · aarch64 windows · x86_64

06Labels

#aws #securitylake #cloud #infrastructure